Headline
CVE-2012-4818: Security Bulletin: Lack of path restriction may allow access to sensitive data stored on IBM InfoSphere Information Server (CVE-2012-4818) - IBM PSIRT Blog
IBM InfoSphere Information Server 8.1, 8.5, and 8,7 could allow a remote authenticated attacker to obtain sensitive information, caused by improper restrictions on directories. An attacker could exploit this vulnerability via the DataStage application to load or import content functionality to view arbitrary files on the system.
Share this post:
IBM InfoSphere Information Server could allow a remote authenticated attacker to obtain sensitive information, caused by improper restrictions on directories. An attacker could exploit this vulnerability via the DataStage application to load or import content functionality to view arbitrary files on the system.
Affected Products: IBM InfoSphere Information Server
Affected Versions: 8.1, 8.5, and 8.7
Refer to the following reference URLs for remediation and additional vulnerability details.
**IBM Product Security Incident Response
Acknowledgement
****September 20, 2022**
IBM acknowledges and thanks the security researchers and organizations listed below for reporting and working with us to resolve one or more security vulnerabilities in our products and services. Disclosures for 2022 Credit to Akshay Shelke (LinkedIn, Secureise, Twitter) Love Yadav (email, LinkedIn) Digant Prajapati (email, LinkedIn) Yoel Indra (email, LinkedIn) Severus of VietSunshine Security …read more
A new and advanced Rowhammer-based attack on DDR4 memory****March 11, 2020
A new and advanced Rowhammer-based attack on DDR4 memory was announced on March 10, 2020. (CVE-2020-10255) The attack has been shown to cause memory corruption in lab environments. Vulnerability exploitation on IBM Power processor architectures, IBM Z-based architectures, IBM Cloud and IBM storage products would be difficult. No customer actions are currently required. IBM Power …read more
XSA-353 Security Vulnerabilities****November 13, 2019
Security vulnerability CVE-2020-29479 could potentially enable a denial of service attack or allow unauthorized access to the hypervisor, and is addressed by Citrix in XSA-353 security advisories. IBM Cloud has worked with its technology partners to deploy mitigation and remediation measures. There is no known malicious exploit of this vulnerability at this time. …read more